General
- Target 2026-09-06_8d210b263227fc32a041a7f64531cb7e_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample260906-2v5eps11gt
- SHA256 390b136ba8ca62a7766ea71840b971aac50bc0d71551499cf7a76c04339843e3
- MD5 8d210b263227fc32a041a7f64531cb7e
- SHA1 3aeb1467c0f6a270fb7ea7ec66acba3038a1cec7
- SHA512 69f57f9534f35fb69ebbd01f4b5fd15dbb233ced26fc85d4984aba9cd5a4054d8f92d8453c9593000d4a642bdc47e7b3a771ed095b8c8db4a9f893d05261f69f
- SSDEEP 393216:JK6HiRE5bxxlQCcv6QaAu5SVDMTNSG/lVrl3KEY:AUbx8PvQ6yhpK1
- TLSH T18FE62322B79158A6DC749F3C0019A303403F2E47DE98AFEF3BDA37694A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_8d210b263227fc32a041a7f64531cb7e_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_8d210b263227fc32a041a7f64531cb7e_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 390b136ba8ca62a7766ea71840b971aac50bc0d71551499cf7a76c04339843e3
- MD5 8d210b263227fc32a041a7f64531cb7e
- SHA1 3aeb1467c0f6a270fb7ea7ec66acba3038a1cec7
- SHA512 69f57f9534f35fb69ebbd01f4b5fd15dbb233ced26fc85d4984aba9cd5a4054d8f92d8453c9593000d4a642bdc47e7b3a771ed095b8c8db4a9f893d05261f69f
- SSDEEP 393216:JK6HiRE5bxxlQCcv6QaAu5SVDMTNSG/lVrl3KEY:AUbx8PvQ6yhpK1
- TLSH T18FE62322B79158A6DC749F3C0019A303403F2E47DE98AFEF3BDA37694A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.